Enterasys B5 - Limit for Radius shared secret

[TimS]

Hello everyone,

is there any limitation for the radius shared secret with the newest firmware on a b5? I get the error "invalid message authenticator - wrong secret?"

We use a 32 letters and numbers secret. There a no special characters.

Kind regards, 

[TimS]

That is that what i have checked already. The secret is working on all other switches like EXOS and Microsens

[K-phi · Accepted solution]

Hi @TimS 

Ok, in order to minimize the impact on your network, I can propose you to follow this article to bypass the existing shared secret for the B5 switch.

https://extremeportal.force.com/ExtrArticleDetail?an=000082047

You can also configure a new shared secret supported on the B5 and then follow the article.

KR

Kevin

[TimS]

I have done this and set a secret with only 16 characters. Seems to be the limitation for the b5 switches.

[K-phi]

Hi @TimS,

Typically this message means that the shared secret configured on your NAC is not matching with the shared secret configured on your B5 switch. In case you are using Management Center + Control, you can check that on your Management Center, in tab Control > Access Control > Engines > "Click on your NAC Appliance" > Details > Engine Settings..

KR

Kevin